Rename administrator on domain controller?

[snelephant]

These two threads: Example #1, Example #2, both describe unattended methods for renaming an administrator account. However, the relevant commands (net, renuser, etc.) return errors when I try to rename the administrator account on my domain controller.

Attempts to rename other user accounts in the domain seem to succeed. I just can't rename the domain administrator. I am careful to include the domain parameter where required.

Any clues?

[yronnen]

I don't think it's possible to rename the Administrator account.

Usually sys admins create a new user with administrative priviliges and simply disable the Administrator account.

[snelephant]

It is possible to rename the Administrator account on domain controllers. Indeed, Microsoft encourages it for security reasons. My problem is that their site only provides instructions for renaming the admin account using group policy and I don't know how to change a specific group policy setting automatically.

I was thinking, however, if group policy is simply a GUI for the registry, isn't it conceivable that I can rename the admin account using a registry tweak? If so, where can I find the key and what is the appropriate syntax?

[buletov]

it's more than registry tweak i think...